Jun 26, 2026 Your dependencies can read any file on disk. cap-std makes them ask permission. Rust's standard library grants ambient filesystem authority to every dependency. capability-based-securityrustcap-stdsandboxing
